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Section  SUM 


This  section  contains  the  Probability  Summary  Plots  specified  in  Section  4.5. 1  which  were  used  to 
compile  Table  4-1.  The  following  table  is  a  guide  to  the  plots  found  in  this  section.  The  leftmost  column 
lists  the  MMAE  probability  channels  that  are  plotted  (in  parentheses),  together  with  their  meanings.  The 
Boldface  entries  are  the  plot  data  titles  (which  were  used  for  data  indexing  purposes)  found  within  the  full 
title  at  the  top  of  each  summary  plot,  and  are  listed  in  the  order,  from  left  to  right  in  the  bottom  row  of  the 
table,  that  the  plots  are  found  in  this  section.  As  an  example,  the  Probability  Summary  Plot  for  the  partial 
actuator  impairment  cases  with  e  =  .05  (95%  actuator  impairment  cases)  is  titled:  “Summary  Plot  (with 
Mean  +/-  Sigma)  for  curt5:  10  runs” 


PROBABILITY  SUMMARY  PLOTS  FOR  SINGLE  CONTROL  SURFACE  PARTIAL  | 
IMPAIRMENTS;  NO  RECONFIGURATION.  NO  MANEUVER,  DITHER  ‘ON’ - 0 
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Summary  Plot  (with  Mean  +/-  Sigma)  for  curt/S:  10  runs 
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Appendix  M:  An  Alternative  Control  Reconfiguration  Method 
For  Cases  of  Partial  Actuator  Impairment 

In  cases  of  partial  actuator  impairment  (0<e<1),  the  direct  pseudoinverse  calculation  (Equation 
(3-35  ))  is  equal  to  the  true  inverse  calculation;  Faf'.  The  true  inverse  calculation  will  command  the  partially 
impaired  actuator  to  l/e  times  the  original  command,  and,  as  e  assumes  values  less  than  0.5  (50%  actuator 
failure  or  greater)  this  may  cause  actuators  to  be  commanded  to  rate  and/or  position  saturations.  Maybeck 
[37]  has  suggested  an  alternative  to  computing  and  using  Fa/'  (Section  3.9.2),  in  cases  of  partial 
impairments,  which  would  simplify  redistribution  calculations  and  perhaps  prevent  rate  and  position 
saturations  of  remaining  actuators. 

The  alternative  to  using  the  true  inverse  calculation,Fa,‘',  for  partially  impaired  actuators  is  to  use  a 
variant  of  the  pre-packed  Da,  matrix  (Equation  (3-37))  for  totally  failed  actuators.  Given  a  partial 
impairment  of  the  /*  actuator  such  that  its  effectiveness  is  e,  the  procedure  is  to  multiply  all  j  elements 
column  ‘i’  of  Da,  by  e.  The  command  to  the  impaired  actuator  (j  =  i)  is  equal  to  1.0,  and  all  other 
columns  of  “Da,  varianf  ’  contain  ones  on  the  diagonal.  It  can  be  proven  [49]  that  this  alternative  method 
satisfies  Equation  (3-32).  An  example  is  given  for  the  case  of  a  70%  left  stabilator  (/=!)  actuator 
impairment  (actuator  effectiveness,  e  =.3).  The  desired  condition  is  expressed  by  Equations  (3-30)  and 
(3-32): 
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For  the  impairment  case  specified.  Equation  (3-36)  applies  and  results  in: 
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The  alternative  method  for  this  case  is  to  take  the  folly-failed  Control  Reconfiguration  matrix,  Dai,  for  the 
left  stabilator: 

'  0  0  0  0  0 

1  10  0  0 

D„,  =  +0.906  0  1  0  0 
-0.906  0  0  1  0 

+  0.786  0  0  0  1 

Entry  (1,1)  is  set  equal  to  1.0  (to  generate  a  foil  command  to  the  left  stabilator,  to  which  you  anticipate  a 
response  with  70%  effectiveness)  and  all  other  entries  in  the  first  column  (column  i  =  1)  are  multiplied  by 
0.3  (e  =  .3),  to  distribute  the  required  additional  30%  effectiveness  among  the  unfailed  actuators,  to  3tield: 
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0.3  10  0  0 

Dalvar^.^  =  +0.2718  0  1  0  0 

-0.2718  0  0  1  0 

+  0.2358  0  0  0  1 

This  result  inserted  into  Equation  (3-32)  satisfies  Equation  (3-30),  and  may  prevent  the  left  stabilator  from 
being  “overdriven”  into  rate  or  position  saturation. 
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Appendix  A.  1:  Single  Total  Actuator  Impainnents  (e  =  0),  Control  Redistribution  'OFF',  Dither 


‘ON’,  No  Maneuvers 


This  appendix  contains  the  Probability  Summary  Plot  and  individual  probability  plots  for  cases  of 
single,  total  (100%)  actuator  impairments,  without  aircraft  maneuvering  or  Control  Reconfiguration 
(Redistribution),  but  with  control  dithering  (Sections  4.5  and  4.11.1).  The  following  table  reviews  the 
MMAE  channel  abbreviations  found  on  the  plots,  together  with  their  meanings: 
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Summary  Plot  (with  Mean  +/-  Sigma)  for  curtO:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Fully  Functional  Aircraft;  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Left  Stabilator  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Right  Stabilator  Failure;  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Right  Flaperon  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Rudder  Failure:  10  runs 
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Appendix  A.2:  Single  Total  Actuator  Impairments  (e  =  0),  Control  Redistribution  *ON\  Dither 


*0N\  No  Maneuvers 


This  appendix  contains  the  Probability  Summary  Plot  and  individual  probability  plots  for  cases  of 
single,  total  (100%)  actuator  impairments,  without  aircraft  maneuvering,  but  with  Control  Reconfiguration 
(Redistribution),  and  with  control  dithering  (Section  4.1 1.2). 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Fully  Functional  Aircraft:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Left  Stabilator  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Left  Flaperon  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Right  Flaperon  Failure:  10  runs 
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Appendix  B.l:  Single  75%  Actuator  Impairments  (s  =  .25),  Control  Redistribution  ‘OFF’.  Dither 


‘ON’,  No  Maneuvers 


This  appendix  contains  the  Probability  Siumnary  Plot  and  individual  probability  plots  for  cases  of 
single,  75%  (e  =  .25)  actuator  impairments,  without  aircraft  maneuvering  or  Control  Reconfiguration 
(Redistribution),  but  with  control  dithering  (Section  4.12.1). 
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Summary  Plot  (with  Mean  +/-  Sigma)  for  cur^S:  10  runs 
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of  Right  Stabilator  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Left  Flaperon  Failure:  10  runs 


1 

:c0.5 

0 

1’ 

uO.5 

.  mean-1  second  »  0.002 

0 

1  9  a  4  R - 1 - 9 

1' 

2  0.5 

0 

a:  0.5 

0 

1^ 

t  0.5 

0 

■§0.5 

0 

0  0.5 

CO 

1 - f  *1 - T - T  I  1  1 

mean-1  second  s  0.002 

1  I  t  ..  I  __  1  .  -A-  - ^ - 1 - 

^  1  2  _ 3 _ 4 _ 5 _ B _ 7  ■  ^8 

1  1  9  a  4  s  5  7 _ 8 

1 - f - ^ - Y - T  T  T  1 

mean-1  seco.nd  =  0.010 

■4  1  9  a  4  -R  R  7  R 

1 - f  1 - T  T  T  T  T 

mean-1  second  =  0.004 

1  9  3  4  5  R  7  .  _fi 

.^mean-1se9ond  =  0.008 

1  2 _ 3 _ 4 _ 5 _ B _ Z _ 8 

1’ 

O-0.5 

- 1 - 1 - 1  1  1  1  r 

•  mean-1  second. s  0.604 

w  1 _ ^1 _ _ _ 1 _ : _ - _ 1 _ _ _ _ 1 _ I _ U _ li _ - 

-n  1 _  0 _ 3 _ 4 _ 5 _ B _ 2 _ 8 

r 

«I0.5 

(0 

- 1 - 1 - 1  1  1  I  ^ 

,  .  m^1secori4=0.0^ 

.ni  93A*;fi7R 

q.0.5 

- 1 - 1  1  T  T  \ 

1 _ 2 _ 3 _ 4 _ 5 _ B _ Z _ 8 

wO.5 

- 1 - 1  1  1  1  1 

mean-1  second  =  0.007 

0 

>•5 

_ 1 _ 2 _ 3 _ 4 _ 5 _ 6 _ 7 _ 8 

mean-1  second  s  0.001 

_ Li _ 1 _ 1 _ 1 _ L- _ 1 _ 1 _ 

0 

1 

3  1  2  3  4  5  6  7  8 

Time  (sec) 

mean-1  second  =  0.001 


3  4  5 

Tin*n  .'sec) 


a_y  r  p  a_n  q  aoa 


Mean  (+/-  One  Std  Dev)  Probabilities  of  Rudder  Failure:  10  runs 
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Appendix  B.2:  Single  75%  Actuator  Impairments  (s  =  .25),  Control  Redistribution  ‘ON’,  Dither 

‘ON’,  No  Maneuvers 

This  appendix  contains  the  Probability  Summary  Plot  and  individual  probability  plots  for  cases  of 
single,  75%  (e  =  .25)  actuator  impairments,  without  aircraft  maneuvering,  but  wdth  Control  Reconfiguration 
(Redistribution),  and  with  control  dithering  (Section  4.12.2). 
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Summary  Plot  (with  Mean  +/-  Sigma)  for  recon25: 10  ruris 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Fully  Functional  Aircraft:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Right  Flaperon  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Rudder  Failure:  10  runs 


Appendix  C.l:  Single  50%  Actuator  Impairments  (s  =  .5),  Control  Redistribution  ‘OFF’,  Dither 

‘ON’,  No  Maneuvers 

This  appendix  contains  the  Probability  Summary  Plot  and  individual  probability  plots  for  cases  of 
single,  50%  (s  =  .5)  actuator  impairments,  without  aircraft  maneuvering  or  Control  Reconfiguration 
(Redistribution),  but  with  control  dithering  (Section  4.13.1). 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Fully  Functional  Aircraft:  10  runs 
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Appendix  C.2:  Single  50%  Actuator  Impairments  (e  =  .5),  Control  Redistribution  'ON’,  Dither 


‘ON’,  No  Maneuvers 


This  appendix  contains  the  Probability  Summary  Plot  and  individual  probability  plots  for  cases  of 
single,  50%  (b  =  .5)  actuator  impairments,  without  aircraft  maneuvering,  but  with  Control  Reconfiguration 
(Redistribution),  and  with  control  dithering  (Section  4.13.2). 
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Mean  {+/-  One  Std  Dev)  Probabilities  of  Left  Flaperon  Failure:  10  runs 
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Mean  (+/-  One  Std  Dev)  Probabilities  of  Right  Flaperon  Failure:  10  runs 
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Appendix  D.l:  Dual,  Total  Actuator  (e  =  0)  and  Total-Actuator  /  Total  -Sensor  Impairments, 
Control  Redistribution  ‘ON’,  Dither  VN’,  No  Maneuvers 

This  appendix  contains  the  individual  probability  plots  for  “total  actuator  /  total  actuator  and 
“total  actuator  /  total  sensor”  dual  impairment  scenarios,  with  Control  Reconfiguration  (Redistribution)  and 
with  control  dithering  (Section  4.1 1.3).  The  first  impairment  is  inserted  at  1  second,  followed  by  the  second 
impairment  at  2  seconds,  and  in  all  cases,  there  is  no  aircraft  maneuvering.  Table  D.l  on  the  following  page 
lists  the  impairment  cases,  by  case  number,  which  are  to  be  found  in  this  appendix.  The  leftmost  column  of 
Table  D.l  represents  the  first  impairment  occurring  at  1  second,  while  the  top  row  represents  the  second 
impairment  occurring  at  2  seconds.  The  table  entries  list  the  failure  codes  found  in  the  plot  titles  for  the 
failure  case  represented  by  the  table  row  and  column.  Bold  entries  correspond  to  cases  of  no  second 
impairment.  As  an  example,  the  entry  for  a  left  stabilator  (LS)  impairment  at  1  second,  followed  by  a  right 
flaperon  (RF)  impairment  at  2  seconds  is  found  in  entry  ‘(LS,  RF)’  in  the  table,  and  the  correspondmg 
failure  case  is  ‘fail01.04’.  The  probability  plot  will  contain  this  code  (‘fail01.04’)  in  the  plot  title.  In  fact, 
for  this  specific  case,  the  plot  title  is:  “Mean  (+  /  -  One  Std  Dev)  Dual-fail  Probabilities  of  fail01.04  with 
reconfiguration:  10  runs”.  The  reader  should  not  be  confused  by  the  fact  that,  for  cases  of  total  sensor 
second  impairments,  there  is  an  extra  set  of  zeros  (example:  ‘failOOl.006’  vs.  ‘fail01.06’,  as  one  may 
anticipate)  in  the  failure  code.  The  dual,  total  actuator  impairment  cases  were  run  at  an  earlier  date,  before 
the  additional  zero  placeholders  were  added  to  the  plotting  routine  to  provide  for  meaningful  plot  titles 
Axamg  partial  impairment  scenarios  to  come.  The  reader  is  also  reminded  that,  after  the  switch  to  the  Level 
‘1’  filter  bank,  the  meanings  of  the  probability  traces  in  the  plots  (except  for  the  fully  fimctional  trace, 
which  retains  the  same  meaning)  change  to  that  of  the  first  impaumentp/us  the  second  impaument. 
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Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


aoa 


2  3 

Time  (sec),  failure#!  at  1 


7 


2  3  4  5  6 

Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


aoa 


aoa 


BOB 


aoa 


Time  (sec).  failure#1  at  1  second,  failure#2  at  2  seconds 


aoa 


^  _ I - 1 - 1 - 1 - 

2  3  4  5  6 

Time  (sec),  failure#!  at  1  second,  failure#2  at  2  seconds 


aoa 


aoa 


Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  failOS.OI  with  reconfiguration:  10  runs 


Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


aoa 


0 


1 


7 


8 


Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


2  3  4  5  6 

Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  faii005.006  with  reconfiguration:  10  runs 


2  3  4  5  6 

Time  (sec),  faiiure#1  at  1  second,  failure#2  at  2  seconds 


7 


2  3  4  5  6 

Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


Mean  {+/-  One  Std  Dev)  Dual-fail  Probabilities  of  fail005.009  with  reconfiguration;  10  runs 


Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  faiiOOS.OOlO  with  reconfiguration:  10  runs 


aoa 


Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  fail005.0011  with  reconfiguration:  10  runs 


Time  (sec),  failure#1  at  1  second,  failure#2  at  2  seconds 


Appendix  D.2:  Dual  7 5%  Actuator  (e  =  25)  and  7 5%- Actuator  /  Total  -Sensor  Impairments, 
Control  Redistribution  *0N*,  Dither  *0N\  No  Maneuvers 

This  appendix  contains  the  individual  probability  plots  for  “75%  actuator  /  75%  actuator”  and 
“75%  actuator  /  total  sensor”  dual  impairment  scenarios,  with  Control  Reconfiguration  (Redistribution)  and 
with  control  dithering  (Section  4.12.3).  The  first  impairment  is  inserted  at  1  second,  followed  by  the  second 
impairment  at  2  seconds,  and  in  all  cases,  there  is  no  aircraft  maneuvering.  Table  D.2  on  the  following  page 
lists  the  impairment  cases,  by  case  number,  which  are  to  be  found  in  this  appendix.  The  leftmost  colxmm  of 
Table  D.2  represents  the  first  impairment  occurring  at  1  second,  while  the  top  row  represents  the  second 
impairment  occurring  at  2  seconds.  The  table  entries  list  the  failure  codes  found  in  the  plot  titles  for  the 
failure  case  represented  by  the  table  row  and  column.  Bold  entries  correspond  to  cases  of  no  second 
impairment.  As  an  example,  the  entry  for  a  75%  left  stabilator  (LS)  impairment  at  1  second,  followed  by  a 
75%  right  flaperon  (RF)  impairment  at  2  seconds  is  found  in  entry  ‘(LS,  RF)’  in  the  table,  and  the 
corresponding  failure  case  is  ‘fail25 1.254’.  The  convention  was  to  use  effectiveness,  £,  in  naming  the  plots, 
and  hence  ‘fail25 1.254’  corresponds  to  25%  actuator  effectiveness,  or  a  75%  actuator  impairment.  The 
probability  plot  will  contain  this  code  (‘fail25 1.254’)  in  the  plot  title.  In  fact,  for  this  specific  case,  the  plot 
title  is:  “Mean  (+  /  -  One  Std  Dev)  Dual-fail  Probabilities  of  fail251.254  with  reconfiguration:  10  runs”.  The 
reader  is  reminded  that,  after  the  switch  to  the  Level  ‘  1  ’  filter  bank,  the  meanings  of  the  probability  traces  in 
the  plots  (except  for  the  fully  functional  trace,  which  retains  the  same  meaning)  change  to  that  of  the  first 
impairment  plus  the  second  impairment. 
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Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  fail254.253  with  reconfiguration:  10 
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Appendix  D.3:  Dual,  50%  Actuator  (s  =  5)  and  50%-Actuator  /  Total  -Sensor  Impairments. 
Control  Redistribution  ‘ON’,  Dither  ‘ON’,  No  Maneuvers 


This  appendix  contains  the  individual  probability  plots  for  “50%  actuator  /  50%  actuator”  and 
“50%  actuator  /  total  sensor”  dual  impairment  scenarios,  with  Control  Reconfiguration  (Redistribution)  and 
with  control  dithering  (Section  4.13.3).  The  first  impairment  is  inserted  at  1  second,  followed  by  the  second 
impairment  at  2  seconds,  and  in  all  cases,  there  is  no  aircraft  maneuvering.  Table  D.3  on  the  following  page 
lists  the  impairment  cases,  by  case  number,  which  are  to  be  found  in  this  appendix.  The  leftmost  column  of 
Table  D.3  represents  the  first  impairment  occurring  at  1  second,  while  the  top  row  represents  the  second 
impairment  occurring  at  2  seconds.  The  table  entries  list  the  failure  codes  found  in  the  plot  titles  for  the 
failure  case  represented  by  the  table  row  and  column.  Bold  entries  correspond  to  cases  of  no  second 
impairment.  As  an  example,  the  entry  for  a  50%  left  stabilator  (LS)  impairment  at  1  second,  followed  by  a 
50%  right  flaperon  (RF)  impairment  at  2  seconds  is  found  in  entry  ‘(LS,  RF)’  in  the  table,  and  the 
corresponding  failure  case  is  ‘fail501.504’.  The  convention  was  to  use  effectiveness,  e,  in  naming  die  plots, 
and  hence  ‘fail50 1.504’  corresponds  to  50%  actuator  effectiveness,  or  a  50%  actuator  impairment.  The 
probability  plot  will  contain  this  code  (‘fail501.504’)  in  the  plot  tide.  In  fact,  for  this  specific  case,  die  plot 
title  is:  “Mean  (+  /  -  One  Std  Dev)  Dual-fail  Probabilities  of  fail501.504  with  reconfiguration:  10  runs”.  The 
reader  is  reminded  that,  after  the  switch  to  die  Level  ‘1’  filter  bank,  the  meanings  of  the  probability  traces  in 
the  plots  (except  for  the  fully  functional  trace,  which  retains  the  same  meaning)  change  to  that  of  die  first 
impairment  plus  the  second  impairment. 
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Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  fail502.08  with  reconfiguration:  10  runs 
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Mean  (+/-  One  Std  Dev)  Dual-fail  Probabilities  of  fail503.09  with  reconfiguration:  10  runs 
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